IN THE CLAIMS 

1. (Currently Amended) A method, comprising the steps of: 
receiving a record; 

referencing a set of access rules for the record defined under a trust agreement 
establishing a trust granting legal control over the record to a trustee, on behalf of a 
beneficiary ; and 

applying an appropriate set of access rules to limit access to the record by means 
of an automated system , the limitations being enforced under authority of on e or mor e 
sel e ct e d from the group consi s ting of a cryptographic method for selectiv e ly limiting 
r e cord access bas e d on poss e ssion of a cryptographic key, and a trustee applying the 
access rules to limit access to the record in accordance with the trust agreement . 

2. (Currently Amended) The method according to claim 1 , wherein the 
record is encrypted, further comprising the step of accounting for a decryption of the 
record after access to at least a portion thereof . 

3. (Original) The method according to claim 2, wherein said accounting 
is anonymous. 

4. (Currently Amended) The method according to claim 1 , wherein the 
record has a plurality of portions, eaeh at least one portion being encrypted with at least 
one cryptographic key, said portions being independently accessible, said access rules 
applying to selectively limit access to portions of the record. 

5. (Original) The method according to claim 4, wherein said access rules 
limit access to portions based on an identity of an intended recipient. 

6. (Currently Amended) The method according to claim 1, further 
comprising the step of supplying a decryption key for a respective record portion in 
accordance with the applied set of rules. 


Felsher-201.1 


-2- 


7. (Currently Amended) The method according to claim 1, further 
comprising the step of accounting for attempted access to at least a decryption of a 
portion of the record. 

8. (Original) The method according to claim 1, wherein the set of access 
rules are associated with an intended recipient of the record. 

9. (Original) The method according to claim 1, further comprising the 
step of referencing an index to define a record. 

10. (Original) The method according to claim 9, wherein the index further 
stores a set of access rules for qualifying an intended recipient with respect to each of the 
records. 

1 1 . (Original) The method according to claim 1 , further comprising the 
step of using an index to identify a record potentially responsive to a query. 

12. (Original) The method according to claim 1, further comprising the 
step of using an index comprising a set of associations of patient identities and medical 
transaction records to identify records relating to a respective patient. 

1 3 . (Original) The method according to claim 1 , further comprising the 
step of using an index comprising a set of associations of record identification, record 
characteristic, and said access rules to identify records relating to a query and limiting 
access to portions thereof. 

14. (Original) The method according to claim 1, wherein the record 
comprises a plurality of portions, the portions being separately encrypted and having 
associated sets of independent rules. 

15. (Original) The method according to claim 1, wherein the access rules 
are role based access rules relating to a role of the intended recipient. 

1 6. (Original) The method according to claim 1 , wherein the access rules 
are context based access rules relating to a context of record access. 
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17. (Currently Amended) The method according to claim 1, wherein the 
access rules are defined by a grantor rights hold e r of the trust record . 


18. (Currently Amended) The method according to claim 1, wherein the 
record is encrypted, and a decryption of the record triggers a remotely-sensed transaction. 

19. (Original) The method according to claim 1 8, wherein the remotely 
sensed transaction comprises a financial accounting transaction. 

20. (Original) The method according to claim 1 8, wherein the remotely 
sensed transaction comprises an access audit trail transaction. 

21. (Original) The method according to claim 2, wherein said accounting 
occurs upon supply of the respective decryption key. 

22. (Original) The method according to claim 2, wherein said accounting 
occurs upon use of the respective decryption key. 

23. (Original) The method according to claim 1, wherein the record 
comprises a medical record. 

24. (Original) The method according to claim 1 , wherein the record 
comprises a media content record. 

25. (Currently Amended) The method according to claim 1, wherein the 
access rules are interpreted in accordance with compris e a database of jurisdictional trust 
laws. 

26. (Currently Amended) The method according to claim 1, wherein the set of 
access rules are interpreted in accordance with comprises a database of jurisdiction- 
dependent privacy laws. 

27. (Currently Amended) The method according to claim 1, further 
comprising the step of creating a virtual trust comprising ef the record,, implemented in 
accordance with the trust laws of an associat e d a specified jurisdiction. 
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28. - (Currently Amended) The method according to claim 1, wherein the 
record comprises r e cords compris e separate articles within a digital publication. 

29. (Original) The method according to claim 1, further comprising the 
step of receiving the set of access rules. 

30. (Original) The method according to claim 1, further comprising the 
step of generating the set of access rules based on the record. 

3 1 . (Currently Amended) The method according to claim 1 , wherein a the 
record e ncryption is encrypted associated with an encryption scheme having a rolling 
code. 

32. (Original) The method according to claim 1, wherein the trustee 
controls the records and implements the access rules without requiring access to a content 
of the record. 

33. (Currently Amended) The method according to claim 1, wherein the 
trustee controls acts without requiring access to the records. 

34. (Original) The method according to claim 1, wherein the trustee 
selectively processes the records. 

35. (Original) The method according to claim 1, wherein the records 
comprise a type selected from the group consisting of legal information, government 
records, financial records, commercially valuable trade secret legal information, 
manufacturing information, banking information, consumer entertainment media, digital 
music files, video information, cinema information, consumer information, personal 
demographic information, credit card information, personal contact information, social 
security number information, publication information, separate articles within a digital 
publication, and investment account information. 

36. (Currently Amended) The method according to claim 1 , wherein the 
record comprises a patient file, placed in a privileged trust for the patient with a m 
ind e p e nd e nt trustee, said trustee implementing the set of rules for access with respect to 
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each transaction record within the patient file defined by the patient and legal jurisdiction, 
wherein said trustee interacts with the patient record information to at least one of 
maintain, process, receive, deliver, er and transmit portions of the patient record in secure 
and verifiable fashion to authorized entities in compliance with the trust. 

37. (Currently Amended) The method according to claim 1, wherein the 
record comprises a corpus of a medical information trust for holding medical records on 
behalf of a patient pati e nts , in an organization distinct from the caregiver; the trustee 
charging for access to the medical record, and maintaining a record of each access of the 
medical record. 

38. (Currently Amended) The method according to claim 1, wherein the trust 
has a beneficiary and access rules are applied to limit access by an identified intended 
recipient, without communicating an identity of the intended recipient to the r e sp e ctiv e 
beneficiary. 

39. (Currently Amended) A method, comprising the steps of: 

placing information in legal trust with a trustee on behalf of a beneficiary; 

p e rmitting a user to acc e ss th e information in the trust; and 

implem e nting a rul e for s e l e ctiv e ly providing automatically authorizing access to 
the information in trust based on compliance with a trust-defined rule , including requiring 
an electronic communication between a the user and the trustee ; and 

permitting an authorized user to access the information in the trust . 

40. (Original) The method according to claim 39, wherein the rule 
comprises a compensation rule for obtaining a right to the information. 

4 1 . (Original) The method according to claim 40, wherein the electronic 
communication comprises an electronic funds transfer. 


Felsher-201.1 


-6- 


42. (Original) The method according to claim 40, wherein the 
compensation rule is integrally associated with the information, and wherein the 
implementing occurs as a result of user interaction with the information. 

43. (Original) The method according to claim 39, wherein the information 
comprises a patient medical record. 

44. (Original) The method according to claim 39, wherein the information 
comprises consumer entertainment media. 

45. (Currently Amended) The method according to claim 39, wherein the 
trustee is interposed between a rights holder for th e information the beneficiary and the 
user, the trustee maintaining an anonymity of the user while accounting to the beneficiary 
rights hold e r . 

46. (Currently Amended) The method according to claim 39, wherein the 
trustee is interposed between the beneficiary a rights hold e r for th e information and the 
user, the trustee characterizing the user based on a classification of information usage, 
while accounting to the rights hold e r beneficiary for the use, without specifically 
identifying information usage of a user. 

47. (Currently Amended) The method according to claim 39, wherein a 
transfer of the information to the user requires an electronic transfer of value from the 
user to the trustee, further comprising the step of accepting the value by the trustee while 
stripping an identification of the user from a retained transfer record of an identifi e r of 
th e us e r . 

48. (Original) The method according to claim 39, further comprising the 
steps of receiving an identification of desired information content from a user; and 
logging the access employing a digital signature of the user. 

49. (Original) The method according to claim 48, wherein the digital 
signature is anonymous with respect to the beneficiary. 
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50. (Currently Amended) The method according to claim 48, wherein the 
p e rmitting th e access authorizing step entails requiring the user to enter into a restrictive 
covenant. 

5 1 . (Original) The method according to claim 40, wherein the trustee 
manages access to the information and implements the access rules as an intermediary 
for, and communicates compensation information to, the beneficiary. 

52. (Currently Amended) The method according to claim 40, wherein the 
information has an associated compensation value, and comprises digital media 
information, said digital media information being associated with subsidy content having 
an associated subsidy value , further comprising the step of accounting with the user for 
use of the digital media information offset by a the subsidy value for subsidy content . 

53. (Currently Amended) A method, comprising the steps of: 
defining information content and associated access rules; 

transmitting the information content and associated access rules to a trustee under 
the terms of a trust agreement ; and 

automatically implementing, by under control of the trustee, the associated access 
rules with respect to the information content, to establish a virtual trust in accordance 
therewith. 

54. (Original) The method according to claim 53, wherein the information 
content comprises media information, and the associated access rules comprise economic 
rules. 

55. (Original) The method according to claim 53, wherein the information 
content comprises medical record information, and the associated access rules comprise 
restrictive access rules based on an identity or characteristic of the user. 
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56. (Original) The method according to claim 55, further comprising the 
step of transmitting, from the trustee, information content in accordance with the 
associated rules. 

57. (Original) The method according to claim 53, wherein the trustee 
controls the information content and implements the rules without requiring access to the 
information content. 

58. (Currently Amended) A database system, comprising a plurality of 
records, each record having an associated set of access rules, means for automatically 
applying the appropriate set of access rules to limit access to the record, the limitations 
being enforced by on e or mor e s e lect e d from th e group consisting of a cryptographic 
m e thod for s e l e ctiv e ly limiting r e cord acc e ss bas e d on poss e ssion of a cryptographic k e y 
and a trustee operating under an established legal trust and applying the access rules on 
behalf of a beneficiary in accordance with the legal trust . 

59. (Currently Amended) The system according to claim 58, wherein the 
record is encrypted, further comprising means for accounting for a decryption of the 
record. 

60. (Original) The system according to claim 59, wherein said accounting 
is anonymous. 

61 . (Original) The system according to claim 58, wherein the record has a 
plurality of portions, each portion being encrypted with at least one cryptographic key, 
said portions being independently accessible, said access rules applying to selectively 
limit access to portions of the record. 

62. (Original) The system according to claim 61, wherein said access 
rules limit access to portions based on an identity of an intended recipient. 

63. (Currently Amended) The system according to claim 58, wherein the 
record comprises a plurality of encrypted portions, further comprising the step of 
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supplying a decryption key for a respective record portion in accordance with the applied 
set of rules. 

64. (Currently Amended) The system according to claim 58, wherein at least a 
portion of the record is encrypted, further comprising an accounting system for 
accounting for a decryption of a portion of the record. 

65. (Original) The system according to claim 58, wherein the set of access 
rules are associated with an intended recipient of the record. 

66. (Original) The system according to claim 58, further comprising the 
step of referencing an index to define a record. 

67. (Original) The system according to claim 66, wherein the index 
further stores a set of access rules for qualifying an intended recipient with respect to 
each of the records. 

68. (Original) The system according to claim 67, further comprising the 
step of using an index to identify a record potentially responsive to a query. 

69. (Currently Amended) The system according to claim 58, wherein the 
record comprises a medical record, and wherein an index of a set of associations of 
patient identities and medical transaction records is used to identify records relating to a 
respective patient. 

70. (Original) The system according to claim 58, wherein an index of a 
set of associations of record identification, record characteristic, and said access rules to 
identify records relating to a query and limiting access to portions thereof. 

71. (Original) The system according to claim 58, wherein the record 
comprises a plurality of portions, the portions being separately encrypted and having 
associated therewith sets of independent rules. 

72. (Currently Amended) The system according to claim 58, wherein the 
access rules are role based access rules relating to a role of the an intended recipient. 
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73. (Original) The system according to claim 58, wherein the access rules 
are context based access rules relating to a context of record access. 

74. (Currently Amended) The system according to claim 58, wherein the 
access rules are defined by a grantor rights hold e r of the trust r e cord . 

75. (Original) The system according to claim 58, wherein a decryption of 
the record triggers a remotely-sensed transaction. 

76. (Original) The system according to claim 75, whereimthe remotely 
sensed transaction comprises a financial accounting transaction. 

77. (Original) The system according to claim 75, wherein the remotely 
sensed transaction comprises an access audit trail transaction. 

78. (Original) The system according to claim 59, wherein said accounting 
occurs upon supply of the respective decryption key. 

79. (Original) The system according to claim 59, wherein said accounting 
occurs upon use of the respective decryption key. 

80. (Original) The system according to claim 58, wherein the record 
comprises a medical record. 

8 1 . (Original) The system according to claim 58, wherein the record 
comprises a media content record. 

82. (Currently Amended) The system according to claim 58, wherein the 
access rules are interpreted in accordance with compris e a database of jurisdictional trust 
laws. 

83. (Currently Amended) The system according to claim 58, wherein the set 
of access rules are interpreted in accordance with c omprises a database of jurisdiction- 
dependent privacy laws. 
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84. (Original) The system according to claim 58, further comprising the 
step of creating a virtual trust encompassing the record, implemented in accordance with 
the trust laws of an associated jurisdiction. 

85. (Original) The system according to claim 58, wherein the records 
comprise separate articles within a digital publication. 

86. (Original) The system according to claim 58, further comprising the 
step of receiving the set of access rules. 

87. (Original) The system according to claim 58, further comprising the 
step of generating the set of access rules based on the record. 

88. (Currently Amended) The system according to claim 58, wherein a record 
is encrypted e ncryption is associat e d with an encryption scheme having a rolling code. 

89. (Original) The system according to claim 58, wherein the trustee 
controls the records and implements the access rules without requiring access to a content 
of the record. 

90. (Original) The system according to claim 58, wherein the trustee 
controls access to the records. 

91 . (Original) The system according to claim 58, wherein the trustee 
selectively processes the records. 

92. (Original) The system according to claim 58, wherein the records 
comprise a type selected from the group consisting of legal information, government 
records, financial records, commercially valuable trade secret legal information, 
manufacturing information, banking information, consumer entertainment media, digital 
music files, video information, cinema information, consumer information, personal 
demographic information, credit card information, personal contact information, social 
security number information, publication information, separate articles within a digital 
publication, and investment account information. 
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93. (Currently Amended) The system according to claim 58, wherein a record 
comprises a patient file, placed in a privileged trust for the patient with a an ind e p e ndent 
trustee, said trustee implementing the set of rules for access with respect to each 
transaction record within the patient file, said rules being defined by the patient and legal 
jurisdiction, wherein said trustee interacts with the patient record information to at least 
one of maintain, process, receive, deliver, er and transmit portions of the patient record in 
secure and verifiable fashion to authorized entities in compliance with the trust. 

94. (Currently Amended) The system according to claim 58, wherein a record 
comprises a corpus of a medical information trust for holding medical records on behalf 
of a patient pati e nts , in an organization distinct from the caregiver; the trustee charging 
for access to a medical record, and maintaining a record of each access of said medical 
record. 

95. (Original) The system according to claim 58, wherein access rules are 
applied to an identified intended recipient without communicating an identity of the 
intended recipient to the respective beneficiary. 

96. (Original) A system, comprising: 

a trust, formed by providing information to a trustee on behalf of a beneficiary 
along with a set of access rules to be applied by the trustee to selectively permit a user to 
access the information in the trust; and 

means for automatically providing selective access to the information, in 
accordance with the set of access rules, based on an electronic communication between 
the user and the trustee. 

97. (Original) The system according to claim 96, wherein the rule 
comprises a compensation rule for obtaining a right to the information. 

98. (Original) The system according to claim 97, wherein the electronic 
communication comprises an electronic funds transfer. 
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99. (Original) The system according to claim 97, wherein the 
compensation rule is integrally associated with the information, and wherein the 
implementing occurs as a result of user interaction with the information. 

100. (Original) The system according to claim 96, wherein the information 
comprises a patient medical record. 

101 . (Original) The system according to claim 96, wherein the information 
comprises consumer entertainment media. 

102. (Currently Amended) The system according to claim 96, wherein the 
trustee is interposed between a rights hold e r for th e information the beneficiary and the 
user, the trustee maintaining an anonymity of the user while accounting to the beneficiary 
rights hold e r . 

103. (Currently Amended) The system according to claim 96, wherein the 
trustee is interposed between a rights hold e r for th e information the beneficiary and the 
user, the trustee characterizing the user based on a classification of information usage, 
while accounting to the rights hold e r beneficiary for the use, without specifically 
identifying information usage of a user. 

104. (Original) The system according to claim 96, wherein a transfer of the 
information to the user requires an electronic transfer of value from the user to the 
trustee, further comprising the step of accepting the value by the trustee while stripping a 
retained transfer record of an identifier of the user. 

105. (Original) The system according to claim 96, further comprising 
means for receiving an identification of desired information content from a user; and 
means for logging the access employing a digital signature of the user. 

106. (Original) The system according to claim 105, wherein the digital 
signature is anonymous with respect to the beneficiary. 

107. (Original) The system according to claim 96, wherein the user is 
required to enter into a restrictive covenant for access to the information. 
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108. (Original) The system according to claim 97, wherein the trustee 
manages access to the information and implements the access rules as an intermediary 
for, and communicates compensation information to, the beneficiary. 

109. (Original) The system according to claim 97, wherein the information 
has an associated compensation value, and comprises digital media information, said 
digital media information being associated with subsidy content, wherein the user 
accounts to said selective access providing means for use of the digital media information 
offset by a value for subsidy content. 

1 10. (Currently Amended) A virtual trust system, comprising: 

a set of defin e d information cont e nt and associated rules selective rights held as at 
least portion of a corpus of a trust, for restricting at least one of access, use, storage and 
transmission of a respective set of defined content information, organized as a legal entity 
under the laws of a jurisdiction ; and 

a trustee^ under the trust laws of the jurisdiction, receiving the information content 
and associated rules rights and implementing a virtual trust in accordance therewith. 

111. (Currently Amended) The system according to claim 110, wherein the 
information content comprises media information, and the associated access rul e s rights 
comprise economic rules. 

1 12. (Currently Amended) The system according to claim 1 10, wherein the 
information content comprises medical record information, and the associated acc e ss 
Riles rights comprise restrictive access rules based on an identity or characteristic of the 
user. 

113. (Currently Amended) The system according to claim 112, further 
comprising the step of transmitting, from the trustee, information content in accordance 
with the rights associat e d rul e s . 
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1 14. (Currently Amended) The system according to claim 110, wherein the 
trustee controls the information content and implements th e rules rights-based restrictions 
without requiring access to the information content. 

115. (Original) The system according to claim 1 1 0, wherein the defined 
information content is provided as a set of records, each record having a plurality of 
portions, at least two such portions being associated with independent cryptographic 
keys, further comprising a database index providing an association between a record 
descriptor, a record identification, and a set of limiting access rules for each privileged 
database record; and a cryptographic key database, for storing cryptographic keys 
associated with portions of a record. 

1 16. (Currently Amended) The system according to claim 110, wherein said 
rttles rights are a set of rules selected from the group consisting of one or more of role 
based access rules, and context based access rules. 

117. (Original) The system according to claim 115, wherein each of the 
portions is encrypted with at least one cryptographic key, said portions being 
independently accessible. 

118. (Original) The system according to claim 115, further comprising 
means for accounting for a decryption of an encrypted record or portion of a record. 

119. (Original) The system according to claim 115, wherein the records 
comprise medical records. 

120. (Currently Amended) The system according to claim 1 1 0, wherein the set 
of rul e s rights are interpreted in accordance with compris e a database of jurisdictional 
trust laws. 

121. (Currently Amended) The system according to claim 1 1 0, wherein the 
mles rights are jurisdiction-dependent, further comprising an input for receiving an 
identification of a relevant jurisdiction. 
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1 22. (Original) The system according to claim 121, further comprising 
means for resolving inconsistencies between a plurality of relevant jurisdictions. 

123. (Currently Amended) The system according to claim 121, further 
comprising a plurality of rule sets of rights , each rule set of rights being associated with a 
different jurisdiction, further comprising means for applying a set of rules rights relevant 
to an associated jurisdiction. 

124. (Currently Amended) The system according to claim 110, further 
comprising a transaction log including a digital signature of a transactor, wherein the 
transaction log may be audited through authentication of the us e of a compl e m e ntary 
digital signature. 

125. (Original) The system according to claim 124, wherein the transaction 
log may be audited without revealing an identity of the transactor. 

126. (Original) The system according to claim 124, wherein the transaction 
log audited reveals an identity of the transactor. 

127. (Currently Amended) A transmitted medical information record, including 
patient-specific data, comprising at l e ast on e a plurality of medical transaction 
information files file, associated with the specific patient, each medical transaction 
information file being separately encrypted , and being subject to a separate role-based 
access rule and an searchable index identifying a content of said medical transaction 
information files, a search of said index being role-based rule sensitive to withhold index 
information from unauthorized users . 

128. (Currently Amended) The record according to claim 127 US, wherein the 
record comprises at least two medical transaction information files, each file being 
separately encrypted. 

129. (Currently Amended) The record according to claim 127 further 
comprising an access rule embedded in the medical transaction information file. 
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130. (Currently Amended) The record according to claim 127 434, wherein the 
access rule is not encrypted. 

131. (Currently Amended) The record according to claim 127 434, wherein the 
medical transaction file encryption comprises public key encryption. 

132. (Currently Amended) The record according to claim 127 434, wherein the 
medical transaction file encryption comprises multiple levels of public key encryption, 
employing differing keys. 

133. (Currently Amended) The record according to claim 127 434, wherein the 
medical transaction file encryption comprises a first public key encryption employing a 
patient-specific public key, and a second public key encryption employing a recipient 
specific public key. 

1 34. (Currently Amended) The record according to claim 127 434, wherein the 
medical transaction file encryption comprises a public key encryption employing a 
recipient-system interaction specific key. 

135. (Original) The record according to claim 1 34, wherein the medical 
transaction file encryption further comprises a first public key encryption employing a 
patient-specific public key, and a second public key encryption employing a recipient 
specific public key. 

136. (Original) The record according to claim 134, wherein said recipient- 
system interaction specific key interacts with an applet wrapper to decrypt the medical 
record. 

137. (Currently Amended) A system for managing the record according to 
claim 127 434, comprising a database system for hosting the medical transaction 
information files, and an accounting system for accounting for access to a content of each 
of said encrypted medical transaction information files. 

138. (Original) The system according to claim 137, wherein the accounting 
is a financial accounting. 
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139. (Original) The system according to claim 137, further comprising an 
audit trail. 

140. (Currently Amended) A business method, comprising the steps of: 

establishing, in an organization entity distinct from the caregiver, a m e dical 
information trust right to hold a medical record or associated access permission on behalf 
of a patient; 

charging for access to or permission to access the medical record by causing at 
least one of a monetary transfer and an accounting entry representing a proposed 
monetary transfer ; and 

maintaining a record of at least one of each access of or and permission to access,, 
the medical record. 

141. (Original) The method according to claim 140, wherein the access 
permission comprises a cryptographic key. 

142. (Currently Amended) A business method, comprising the steps of: 

establishing, in an organization entity distinct from a rights holder, a virtual 
information trust to hold a content record or associated access permission on behalf of a 
rights holder; 

charging for access to or permission to access the content record by causing at 
least one of a monetary transfer and an accounting entry representing a proposed 
monetary transfer ; and 

maintaining a record of each access of or permission to access the content record. 

143. (Original) The method according to claim 142, wherein the access 
permission comprises a cryptographic key. 

144. (New) A method, comprising the steps of: 
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defining a set of access rules associated with information content; 

transmitting the associated access rules to an intermediary; 

automatically implementing, under control of the intermediary, the associated 
access rules with respect to the associated information content, the rules being 
implemented dependent on a context of attempted access; and 

accounting, by the intermediary, for access to the information content and 
respective context. 


Felsher-201.1 


-20- 


